
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e0f7ee8-c7ca-3d77-9b80-92ee7952169a.roa
File: 2e0f7ee8-c7ca-3d77-9b80-92ee7952169a.roa (raw, json)
Hash identifier: wx/F4jHa8KVZrO920hl8fAmjLXhv6sUaH3YANi8p+AQ=
Subject key identifier: 4E:72:8E:D1:66:81:38:E9:01:42:53:5C:87:13:1D:1B:63:4A:71:94
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F4328584EA79F13657CAAC6BD624CE880
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e0f7ee8-c7ca-3d77-9b80-92ee7952169a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7155
IP address blocks: 72.173.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9f:13:65:7c:aa:c6:bd:62:4c:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=32c24368-5d29-46fe-ab0a-3c34ff2d9161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:c9:31:a7:6c:94:f3:cd:48:c7:36:37:3e:
e4:36:b8:4a:df:e2:ac:67:e1:6a:c5:ba:c4:5d:f3:
d3:ba:df:10:a5:40:81:78:41:9e:e8:03:23:20:93:
b2:cc:f4:1a:93:47:23:e7:70:a7:e8:da:8a:a7:bb:
04:51:4d:a3:81:22:91:9a:32:a8:00:5a:e7:1e:63:
35:93:99:19:1e:43:ef:6e:8a:5d:fd:f6:e1:07:63:
e9:ea:f9:07:2b:ab:2f:c8:9a:8a:1d:96:94:0f:ae:
bc:f6:a4:eb:a8:33:fd:29:02:2a:80:d6:91:e8:ab:
0e:f2:ab:a3:c9:e6:cf:7c:56:c7:fd:88:12:7c:68:
53:33:9a:a1:5b:18:4f:ba:65:c4:9e:56:6e:8c:91:
9b:df:db:17:2d:0b:2d:b5:f6:42:84:4a:d3:d6:e4:
5a:4d:41:33:b2:83:db:19:df:66:d0:78:e5:f1:0a:
f6:fe:d0:b0:29:8f:cd:04:15:9f:4f:2f:a2:6d:49:
f8:2c:20:f0:03:1a:52:c2:37:75:17:42:9e:83:bf:
1b:51:0b:70:af:a1:3e:da:93:df:6d:38:59:30:04:
64:76:c1:2c:7a:9a:74:4f:51:12:e4:5d:ad:f8:a9:
db:93:72:d5:c1:2c:0a:86:57:4f:a8:a7:b2:2b:80:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:72:8E:D1:66:81:38:E9:01:42:53:5C:87:13:1D:1B:63:4A:71:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2e0f7ee8-c7ca-3d77-9b80-92ee7952169a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
72.173.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:79:94:8c:9a:3f:da:72:c3:22:2e:ea:67:3e:ee:fb:12:8c:
70:62:d5:5a:82:9d:02:df:e7:95:f6:28:f5:5a:ed:47:e1:41:
70:33:96:be:e1:fd:d0:1d:d7:06:25:58:d2:99:f7:9e:68:dc:
1c:cd:76:41:0a:7f:87:28:8b:06:00:25:0f:53:84:62:c1:05:
5f:0c:a3:08:6e:06:45:b5:34:a1:f6:1b:34:95:78:73:21:10:
12:40:2a:9f:80:c9:69:52:c2:6e:aa:12:5a:6c:68:e2:c6:97:
f4:58:4d:54:77:64:dc:30:7e:d6:15:ec:70:e0:60:60:b0:ab:
63:07:ac:ee:a0:cd:1f:78:c6:a6:0a:46:f4:cc:18:51:23:4e:
2c:d5:cd:20:d6:9c:52:bc:6f:3e:ba:f8:ec:de:32:74:97:62:
9b:38:8b:75:96:2e:bf:ee:9b:f0:44:da:37:11:1c:3e:af:68:
e5:23:f0:2a:ea:3c:09:41:8b:22:d5:af:f4:df:ed:55:80:e9:
c7:92:f7:77:04:50:67:28:a7:b1:01:cf:a0:e1:83:2d:0f:c0:
9b:ac:73:be:21:cd:5b:67:fa:17:9c:da:45:dc:57:15:5b:36:
a1:87:79:9c:7f:f2:2d:93:cf:95:e4:76:62:bb:d4:8f:31:4b:
90:e5:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:09 2026 by rpki-client